Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft
File: rh6ygNFyKEakQSTExi0AWfYa8kI.mft (raw, json)
Hash identifier: XFsZDNmXwwuP/OCXuw/XvJINSeOkNIj8FXcOrVF/HFA=
Subject key identifier: A0:E7:5D:63:7C:D1:23:5C:1A:CB:37:27:68:CE:AE:58:32:C0:CC:CD
Authority key identifier: AE:1E:B2:80:D1:72:28:46:A4:41:24:C4:C6:2D:00:59:F6:1A:F2:42
Certificate issuer: /CN=ae1eb280d1722846a44124c4c62d0059f61af242
Certificate serial: 0193572D7E80B4C3AF70C5D9EF174DBD7E86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 04:00:19 +0000
Manifest this update: Sat 23 Nov 2024 04:00:19 +0000
Manifest next update: Sun 24 Nov 2024 04:00:19 +0000
Files and hashes: 1: d16u2xRq_X5hZCERB1e61dcDSoc.roa (hash: BxsLs0/S23vVdEl1K1TW3kMiEXM7uR7fwRQuXoxvYiM=)
2: rh6ygNFyKEakQSTExi0AWfYa8kI.crl (hash: JnATTHbIDoZc6rmsSSTEXK+4KQI8gOi6OlZuwxrWjJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2d:7e:80:b4:c3:af:70:c5:d9:ef:17:4d:bd:7e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1eb280d1722846a44124c4c62d0059f61af242
Validity
Not Before: Nov 23 04:00:19 2024 GMT
Not After : Nov 24 04:00:19 2024 GMT
Subject: CN=a0e75d637cd1235c1acb372768ceae5832c0cccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4b:ad:2f:61:57:80:33:0d:83:ba:29:0b:02:
c0:2c:d9:d8:80:ce:46:c7:c1:6e:51:5e:d9:d6:e8:
ca:df:d8:fd:83:f0:71:b3:2f:20:f7:97:2c:70:ec:
1c:c4:78:0a:d4:44:29:e0:54:e0:de:2a:76:02:65:
70:52:e6:a6:58:8d:88:2e:cd:97:da:87:2e:9d:08:
21:e0:56:80:85:c9:23:3a:a9:4d:8a:f7:91:44:38:
53:94:07:14:49:20:ac:ed:d7:25:d3:6b:56:c8:05:
47:23:56:1b:56:e9:a9:6d:4a:15:6d:c9:cc:89:ae:
e3:8b:e9:dd:6e:d7:1a:5a:01:2f:5d:13:1b:8f:53:
2a:9d:a0:81:b0:f5:4a:85:f9:8c:48:55:2a:63:d3:
3b:fc:3f:9e:4c:0e:69:13:91:8d:7c:8b:a1:b4:fc:
81:5d:47:73:97:1e:d6:de:e7:77:1d:00:01:c0:fa:
d5:fd:e3:59:6d:b0:5c:cb:78:78:f1:02:7d:e1:74:
0f:03:1b:75:c9:da:10:7b:56:9d:a2:78:73:9b:7f:
4c:42:06:2b:ab:9a:24:f4:f4:12:aa:f9:2c:c2:6b:
b4:3b:71:c4:7c:03:57:17:19:69:96:b2:8f:7c:b5:
fe:49:90:72:95:63:a4:72:65:25:7f:05:eb:48:ec:
6f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E7:5D:63:7C:D1:23:5C:1A:CB:37:27:68:CE:AE:58:32:C0:CC:CD
X509v3 Authority Key Identifier:
keyid:AE:1E:B2:80:D1:72:28:46:A4:41:24:C4:C6:2D:00:59:F6:1A:F2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh6ygNFyKEakQSTExi0AWfYa8kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/1fdf04-8b4e-4332-a4de-7793b9efb1bd/1/rh6ygNFyKEakQSTExi0AWfYa8kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:a2:ab:de:83:a6:44:dd:ce:9d:00:ce:ce:e4:77:22:d7:2d:
2e:92:71:6b:1b:56:20:12:9b:d1:a5:a8:e5:ba:a8:d2:84:3a:
c3:cf:b1:bb:02:50:00:56:97:91:18:ad:6f:26:16:bd:96:71:
52:31:80:0b:19:f6:bf:2e:69:de:4d:4c:c6:8e:4e:ec:40:86:
0c:fb:4e:13:66:70:27:62:ed:62:e3:38:ec:35:08:de:3b:6c:
7f:f8:19:26:a7:9e:a6:2f:ba:d0:e6:74:62:d5:a4:23:3b:89:
88:68:b2:d8:96:7b:3e:27:b6:68:57:31:ae:6f:15:f2:98:9b:
fd:da:ac:99:b5:1e:3b:85:6a:b5:e0:91:c6:d3:6a:05:74:bb:
c0:72:76:c9:fa:a1:f1:84:46:88:21:61:d4:e3:f2:cc:d8:27:
7d:16:99:62:e8:83:bc:20:90:75:44:8c:26:54:c0:64:ea:5e:
a8:89:89:15:e9:fe:f4:78:8b:23:de:46:3c:49:69:d1:13:91:
74:6b:7c:70:51:0b:64:94:76:46:73:78:47:33:b0:b3:15:68:
4d:13:04:40:63:0a:8c:2a:10:03:b9:ab:a5:31:61:1c:d0:ff:
d1:f6:12:81:99:e3:04:28:e9:1c:9f:66:65:df:0b:15:78:58:
cc:a0:d2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:38 2024 by rpki-client on console-fra.rpki-client.org